Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d9aab9-402d-3fd0-83c3-3b8f8fd48cc4.roa
File:                     a1d9aab9-402d-3fd0-83c3-3b8f8fd48cc4.roa (raw, json)
Hash identifier:          aZ3SQ1rd/8BC1pgtUBnsWM1Pob9qtm7wPvZzh4vh5rI=
Subject key identifier:   44:08:AD:0C:19:94:AF:5A:F7:E8:00:19:E2:02:1C:13:18:DB:6B:CC
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848AAFB66A0D2DE5BE253856900
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d9aab9-402d-3fd0-83c3-3b8f8fd48cc4.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     3356
IP address blocks:        205.141.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:66:a0:d2:de:5b:e2:53:85:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=5116d674-af03-4843-bea7-a3bfcbf0e062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:78:71:5a:2c:69:fe:ae:ff:48:48:db:25:
                    6f:74:8e:02:65:e6:d0:f1:5a:dd:d8:06:67:2e:58:
                    d4:1f:c3:61:24:1b:79:06:69:3a:ca:bf:25:ee:1f:
                    cc:0f:ce:a9:4e:c6:54:ed:28:2c:52:1c:b6:d9:e7:
                    49:3d:a6:ff:be:e9:94:81:ee:c1:0e:a7:3f:38:3b:
                    6f:e4:dd:7a:ec:29:89:f4:1b:4f:4e:48:00:b4:c2:
                    20:38:a9:6c:12:d8:7d:dd:03:9c:f1:fe:9a:2c:b5:
                    25:8f:f1:7a:c0:5d:37:c0:9a:43:49:df:c2:6a:5b:
                    ae:1b:8b:d4:64:89:7b:4a:14:e4:3b:22:c4:55:0e:
                    73:f7:f8:c1:23:95:d6:b0:be:b6:ab:30:e5:43:36:
                    6a:8b:3e:ac:32:35:96:21:44:9d:ba:14:f8:40:6b:
                    e3:3f:64:74:35:f7:b1:ad:8a:8b:f3:01:7e:7a:f5:
                    cd:29:72:aa:14:64:9b:af:db:4b:13:7d:f1:64:d5:
                    26:31:23:d2:fe:f4:4f:78:9e:b7:36:e2:00:ad:96:
                    de:c6:b1:8c:fe:b7:ba:ee:29:c1:05:dd:61:07:e4:
                    94:55:46:86:45:f7:76:bd:19:73:91:ce:08:4a:fd:
                    c4:aa:65:1b:11:83:7c:58:f4:71:a1:c4:6f:18:84:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:08:AD:0C:19:94:AF:5A:F7:E8:00:19:E2:02:1C:13:18:DB:6B:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a1d9aab9-402d-3fd0-83c3-3b8f8fd48cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.141.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:87:51:1f:5b:0b:ad:42:60:24:39:2d:c0:df:a2:8e:7a:2f:
         1b:df:36:3c:55:a0:bb:41:17:e7:29:82:05:bc:b8:d9:93:3d:
         b3:83:97:70:20:fc:77:ae:b1:f8:2a:14:2d:0c:cb:b7:4a:09:
         2b:48:6c:9f:a1:b6:e5:fc:69:72:4a:52:34:6d:4a:31:60:cc:
         e0:06:e7:7b:a9:5a:11:57:a6:d1:08:8e:8b:9c:aa:71:f1:f3:
         a0:88:76:bd:4c:1a:31:9a:f9:e1:d8:8e:eb:54:27:cd:7b:d7:
         c7:27:f2:02:d5:fc:a6:f7:fa:35:49:f2:b4:16:af:54:ea:4e:
         87:ff:0c:f3:99:79:b0:ab:78:d9:60:c2:17:d5:36:28:18:17:
         d8:2c:34:c9:02:9f:a0:9d:d0:68:19:4f:b1:3f:b3:ca:85:db:
         b5:bd:19:2f:79:d0:6b:33:ce:d8:8b:7d:9f:a9:42:13:29:ab:
         b0:c8:1a:70:d5:9b:85:be:44:1c:71:d8:a1:3b:17:c9:e8:6f:
         6d:35:67:4b:bf:7a:18:10:1b:34:e2:1c:3d:ca:bc:af:35:55:
         30:fb:c1:a4:0c:0a:09:b0:cf:bc:d9:54:4b:ab:ca:62:9c:04:
         07:6d:51:12:a6:a4:75:1c:cf:6c:d5:22:69:d0:13:0a:44:31:
         a5:2f:52:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:15 2025 by rpki-client